Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +G5xKjcenUydogNLEIpeUiluYJ34iK6stK5f0jrddA4=
Subject key identifier: BB:6C:A4:10:96:79:1A:9E:45:8E:02:7B:4F:EE:A4:1F:06:62:B3:21
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5AA625FF592E49E457C82A40D8AE74BA449917DA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66313a3a2f34382d3438203d3e203539323832.roa
Signing time: Sun 13 Jul 2025 11:46:13 +0000
ROA not before: Sun 13 Jul 2025 11:41:13 +0000
ROA not after: Sun 12 Jul 2026 11:46:13 +0000
asID: 59282
IP address blocks: 2400:d680:f1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a6:25:ff:59:2e:49:e4:57:c8:2a:40:d8:ae:74:ba:44:99:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Jul 13 11:41:13 2025 GMT
Not After : Jul 12 11:46:13 2026 GMT
Subject: CN=BB6CA41096791A9E458E027B4FEEA41F0662B321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:2b:31:1b:84:29:a8:38:b3:28:99:29:f0:
68:c2:bf:08:d5:ac:d5:7b:92:4f:29:0e:d1:6d:50:
49:b0:48:eb:2d:7f:76:74:ee:34:77:8b:5b:f1:4e:
ba:f8:ea:d6:f0:81:21:c6:57:2e:3f:a2:97:47:6e:
71:41:a2:b0:30:15:d7:48:83:40:d4:9b:6c:77:79:
f3:0c:48:1b:bd:0f:7b:d0:bd:56:ea:29:6e:34:7b:
2a:31:eb:0a:7a:50:14:2d:f7:b8:76:c4:1f:02:fb:
4e:ba:71:01:72:5b:10:c6:bc:eb:97:b8:39:28:eb:
d8:a2:01:27:80:f9:21:31:31:ff:8e:46:6a:72:17:
d6:b8:43:f8:fa:c8:ce:8f:24:65:70:01:aa:5b:b2:
6f:75:d1:af:d0:db:cf:7e:fe:4a:13:5d:4b:16:ed:
cd:a0:b5:6d:ef:1a:82:6f:21:89:5c:16:d9:0f:bf:
8c:70:a0:2f:17:be:8a:b3:c1:32:2c:05:5f:dc:23:
39:a3:71:9d:d0:5e:48:f3:bf:dd:16:8b:71:29:9e:
2a:9a:74:fa:72:6f:d2:2a:3d:b8:f6:81:65:b0:ba:
67:4c:74:65:fb:27:05:18:fd:60:37:af:fa:f6:f1:
60:f6:77:bf:54:ea:b4:07:41:95:40:13:27:ff:a3:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:A4:10:96:79:1A:9E:45:8E:02:7B:4F:EE:A4:1F:06:62:B3:21
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f1::/48
Signature Algorithm: sha256WithRSAEncryption
d5:6f:a4:db:d7:af:22:e3:ba:7d:71:79:63:a6:fd:3f:c6:42:
d9:b7:d5:5a:82:05:cb:ee:c4:47:b1:78:d3:f7:e8:62:8e:53:
7f:3a:f8:a8:27:31:11:43:9e:18:bb:95:2e:c0:c1:d8:99:e2:
89:d8:ac:a5:b6:e5:de:49:eb:c0:fc:e6:d5:ce:12:35:77:ed:
35:df:5b:4e:8f:6d:de:a3:65:14:3c:db:d8:e7:e6:28:e0:4c:
77:cb:47:2e:ed:17:db:62:9f:16:bc:49:7b:0d:43:10:92:a1:
9d:96:ef:2e:09:ef:db:6c:01:a2:6c:47:b3:20:4f:46:bf:e6:
61:0e:14:68:4b:e6:c9:fa:d5:37:f9:d6:74:f0:a5:4c:f2:4a:
f1:49:89:2b:e2:18:dd:6c:3b:20:f9:ab:1f:5d:00:74:c7:1e:
28:6c:1d:3f:93:96:22:b8:26:2c:ea:a9:d4:e8:26:8c:08:dd:
4f:38:77:b3:94:c4:c1:c5:c7:2b:1a:37:f0:70:b7:91:fd:3a:
51:e2:df:2d:d2:65:55:65:5f:2e:4e:b0:13:28:02:01:50:0c:
20:a4:db:7f:ee:fd:98:85:22:af:4b:83:c3:27:d7:41:a4:eb:
2a:d4:2a:38:0d:30:f8:1d:cb:b3:3c:8a:b6:26:a8:6e:27:a1:
b9:c0:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:34 2025 by rpki-client